Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/8jVw8rHLeMJqCdH00JPd6Mj95-g.roa
File:                     8jVw8rHLeMJqCdH00JPd6Mj95-g.roa (raw, json)
Hash identifier:          LaHsY6D/mtx6YPle+ZIwUCgUWaWgfxAo0JDb2kpldqM=
Subject key identifier:   F2:35:70:F2:B1:CB:78:C2:6A:09:D1:F4:D0:93:DD:E8:C8:FD:E7:E8
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       78
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/8jVw8rHLeMJqCdH00JPd6Mj95-g.roa
Signing time:             Tue 31 Mar 2026 08:07:20 +0000
ROA not before:           Tue 31 Mar 2026 08:07:20 +0000
ROA not after:            Mon 15 Mar 2027 01:30:02 +0000
asID:                     15830
IP address blocks:        112.140.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 Apr 2026 16:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Mar 31 08:07:20 2026 GMT
            Not After : Mar 15 01:30:02 2027 GMT
        Subject: CN=F23570F2B1CB78C26A09D1F4D093DDE8C8FDE7E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:19:72:50:d7:6e:cc:93:26:57:50:40:41:f5:
                    d3:90:fe:16:3c:7e:e7:11:93:8f:42:ff:47:09:a1:
                    10:02:c7:9b:13:3b:2b:d4:34:b1:d5:a2:79:b4:b7:
                    e9:02:8b:d0:94:9c:06:a3:8e:39:cc:41:72:6b:a2:
                    da:16:f3:b5:1e:bb:7a:26:9f:1d:38:12:84:28:9a:
                    87:ef:ee:b8:b6:54:78:b7:86:d4:90:5e:a7:84:2d:
                    df:91:b3:38:b3:2b:5f:d7:b0:36:a1:2a:87:4e:1f:
                    26:74:91:54:c5:ae:d2:2c:7a:15:98:50:38:6d:a5:
                    9b:47:da:dd:79:d8:be:fe:2a:94:aa:58:ad:94:9e:
                    17:46:86:41:ae:a8:a9:0d:26:07:a6:7b:cf:47:ab:
                    8b:e5:4d:20:28:bf:e9:12:c0:11:3b:35:4f:c7:4e:
                    24:c0:a8:0a:a1:cd:8e:2c:18:6b:da:91:be:4e:e1:
                    5a:eb:7b:4f:42:61:4d:48:4e:44:2e:7a:38:d0:6c:
                    f6:f3:a3:71:92:52:ef:f2:ae:ed:45:7d:1c:33:a4:
                    97:44:14:70:52:dd:8a:3a:2d:22:90:17:44:cd:18:
                    75:79:29:fe:62:0c:c0:45:f9:2f:83:eb:07:14:a7:
                    35:e7:22:70:60:b9:c8:74:84:e9:26:68:b6:40:1c:
                    a5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:35:70:F2:B1:CB:78:C2:6A:09:D1:F4:D0:93:DD:E8:C8:FD:E7:E8
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/8jVw8rHLeMJqCdH00JPd6Mj95-g.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:e1:90:e2:5d:f5:c6:a9:eb:c3:3d:7e:35:8f:9d:4c:d2:00:
         06:bb:f2:50:f7:79:80:7b:24:e9:af:30:1f:8b:09:8d:ed:23:
         80:d1:d3:80:f3:ce:94:12:13:8a:c8:1b:ec:58:e1:3c:a6:9b:
         b7:f9:95:26:91:1c:cd:8c:45:6d:f2:e5:f5:bb:7b:0c:c5:da:
         09:67:e5:d0:c6:a1:41:b9:bc:9c:4f:7b:58:24:87:fb:37:ab:
         61:da:3f:ec:1c:24:1a:ab:1c:d9:3d:ab:28:65:06:e6:7a:b9:
         f6:36:9a:ee:c4:9e:48:1b:e6:28:37:d2:18:f0:7f:41:02:66:
         59:d6:1c:86:c7:16:6a:13:e4:0b:37:f9:84:11:c7:84:1e:d7:
         3b:3e:a9:3e:eb:1d:3d:19:30:ad:40:5d:9a:77:92:4b:3f:b9:
         20:94:df:27:2b:f8:78:4a:1b:a2:51:5b:44:67:c8:69:8d:28:
         b6:94:68:51:e8:ce:6b:bc:59:32:4c:75:d8:94:49:4a:64:35:
         ae:20:e1:e4:24:9f:10:01:1b:c6:55:04:99:db:14:17:58:ed:
         5d:1a:22:80:ff:a2:23:6c:bf:3a:4a:35:6c:f2:d3:c6:82:5e:
         9f:65:9d:89:86:00:1f:9c:bd:ca:04:7d:bd:27:cd:3a:cc:51:
         2f:14:42:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 19:39:46 2026 by rpki-client